Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAC1406B60111EF8DCC53B8762E951A.roa
File: 8BAC1406B60111EF8DCC53B8762E951A.roa (raw, json)
Hash identifier: FmowQjBzc+VeuWYugNEhpzktaahHekYHjfpFMNdS++E=
Subject key identifier: 39:D0:F3:EE:76:B9:8D:B1:53:EC:D0:A7:1C:93:AB:E8:1C:A4:66:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119D1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAC1406B60111EF8DCC53B8762E951A.roa
Signing time: Mon 09 Dec 2024 07:45:23 +0000
ROA not before: Mon 09 Dec 2024 07:45:18 +0000
ROA not after: Thu 13 Feb 2025 07:45:18 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72145 (0x119d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 07:45:18 2024 GMT
Not After : Feb 13 07:45:18 2025 GMT
Subject: CN=6756a013-dd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:d9:2e:fc:1d:ae:83:1a:7f:fe:49:f1:57:
d2:37:df:1f:f3:ab:b2:6c:e5:94:70:ae:f6:a9:24:
1a:c5:14:b1:34:17:60:90:db:00:ab:b9:78:f7:eb:
e5:6b:12:ea:3b:53:0c:b5:00:64:8f:de:c0:8b:2b:
b5:bf:09:09:d7:30:3d:72:28:a7:1e:5f:02:88:2c:
80:1a:61:81:3f:c3:ef:9b:89:77:f3:1c:1f:a0:ae:
71:51:5a:b5:54:5d:54:82:07:82:39:ec:7f:1d:9a:
9f:0b:57:b7:cd:c1:7a:9d:73:d6:36:15:73:f4:7e:
5b:06:3c:11:30:f9:e5:1a:b2:5d:c3:5b:ad:1a:d7:
80:1f:d8:03:bf:8a:84:f5:bf:31:d5:48:d3:14:f9:
33:43:f7:5d:de:58:38:ce:48:42:08:87:eb:0d:ce:
42:2f:43:fc:c7:8f:43:4e:4a:5c:78:ad:ee:15:2e:
b8:db:60:39:37:ed:6b:07:20:94:3b:06:ef:4a:2d:
04:5e:07:e5:0a:27:f9:f4:9e:19:d2:0c:74:fe:86:
2d:94:81:88:fc:05:4f:59:14:7c:73:9c:3f:e4:5d:
a0:28:29:9f:d2:1f:8e:57:2c:68:96:95:18:2e:f9:
86:ca:f5:1d:92:f1:54:de:17:d0:c4:ff:81:a7:f8:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:F3:EE:76:B9:8D:B1:53:EC:D0:A7:1C:93:AB:E8:1C:A4:66:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BAC1406B60111EF8DCC53B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1a:6f:f3:34:05:db:f6:1f:ad:b3:de:85:6f:58:d2:39:b9:
00:3b:b6:af:93:93:8f:ff:d1:56:82:f1:9c:14:6a:bd:e1:93:
d0:78:77:fe:dd:82:24:07:9f:d1:da:e9:59:37:1c:9c:3c:53:
6a:61:07:38:69:42:1f:fc:c2:b5:ff:b3:43:71:f0:94:f1:18:
24:2d:e2:2b:19:8f:ef:5e:4f:80:c7:48:1c:96:26:5a:f6:fd:
44:ff:2b:12:5b:46:e1:b3:96:5c:60:5a:17:03:22:ac:23:11:
59:54:3b:1c:43:7b:98:06:c1:78:fb:37:16:9a:ce:30:b3:4c:
cb:8c:ae:88:bc:98:56:c0:43:e1:84:17:6e:9b:31:55:ef:e0:
fe:1c:79:ee:0c:32:1a:37:7b:f4:17:da:e8:9f:56:97:a8:e5:
0a:eb:b7:b0:5f:cc:bf:fa:d8:e3:00:32:4b:03:30:4c:2e:8f:
ef:85:94:c4:04:88:dc:bc:89:81:f8:a0:2b:3f:1c:d5:02:75:
17:1c:bb:65:98:ca:2e:c4:77:d5:17:94:2e:d9:a3:9b:26:95:
f7:bb:c7:cc:63:e5:93:06:c0:c8:20:a4:79:38:a8:aa:8e:05:
91:cc:01:80:2d:14:41:6c:36:2f:61:ab:ad:c0:6a:b2:76:77:
48:2a:98:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:11:18 2025 by rpki-client